Welcome to the StrangeBee Blog!
Our latest insights about TheHive and incident response

Announcement
TheHive MCP is now generally available!
After months of testing and hardening, TheHive MCP is finally ready to leave beta! Here's what we changed and tested, to ensure you are able to use it confidently, on your own data.

Food for thought
What is DFIR? How a police investigation explains modern incident response
Broken windows, suspicious IPs and cold cases: a phase-by-phase guide to the DFIR lifecycle through the lens of detective work

Food for thought
Security incident prioritization: proven methods to improve alert triage
Not every alert deserves the same urgency. Here's how SOC, CERT, CSIRT and MSSP teams can prioritize threats with context and confidence.












